harbor Harbor Vulnerabilities

Harbor Harbor vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

14 November 2024

Attackers Can Modify P2P Preheat Policies in Other Projects via ID Confusion
CVE-2022-31668
HarborHarbor7.7HIGH
Insufficient User Permissions Lead to Robot Account Compromise
CVE-2022-31667
HarborHarbor6.4MEDIUM
Upload false tags to gain unauthorized access to other projects
CVE-2022-31669
HarborHarbor7.7HIGH
Authorization bypass vulnerability in Tag Retention Policies
CVE-2022-31670
HarborHarbor7.7HIGH
Malicious User Access to Job Logs via Unvalidated User Permissions
CVE-2022-31671
HarborHarbor7.4HIGH
Unauthorized Access to Webhook Policies in Harbor
CVE-2022-31666
HarborHarbor7.7HIGH

2 August 2024

Incorrect User Permission Validation Exposes Configurations to Modification
CVE-2024-22278
HarborHarbor4.3MEDIUM

11 June 2024

Privileged Users Can Leak Task IDs via SQL Injection in Harbor
CVE-2024-22261
HarborHarbor5.5MEDIUM

10 June 2024

Harbor Open Redirect Vulnerability Affects Multiple Versions
CVE-2024-22244
HarborHarbor6.1MEDIUM